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What is NPR 7150.2A 




What is NPR 7150.2 



- Documents NASA Best Practices 

- CMMI Influence 

- General Breakdown 

• Software Management Requirements 

• Software Engineering Process Requirements 

• Software Documentation and Work Product 
Requirements 



Process Management and Risk 
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"A goal without a plan is just a wish." 

- Antoine de Saint Exupery 

7150 Translation 

The project shall: 

• Develop software plan(s). [SWE-013] 

• Peer reviews software plans [SWE-137], [SWE-087]: 

• Maintain, and execute the software plan(s). [SWE-014] 

• Track software activities against the software plans. [SWE-024] 

• Ensure that changes to software plans are agreed to [SWE-026] 

• Record and manage corrective actions for deviations from software plans [SWE-025] 



Process Management and Risk 
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"If you cannot measure it, you cannot improve it." 

- Lord Kelvin 

7150 Translation 

• The Project shall provide software metric data per the Software Metrics Report. 
[SWE-044] 

• The Software Metrics Report shall contain as a minimum the following information 
tracked on a CSCI basis: [SWE-117] 

a. Software progress tracking measures. 

b. Software functionality measures. 

c. Software quality measures. 

d. Software requirement volatility. 

e. Software characteristics. 



Process Management and Risk 
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"The devil is in the details." 

- anonymous 

7150 Translation 

The project shall: 

• Maintain a software cost estimate and associated cost parameter(s) that covers the entire 
software life cycle [SWE-015] 

• Maintain a software schedule that coordinates with the overall project schedule, and 
documents the interactions of milestones and deliverables between software, hardware, 
operations, and the rest of the system [SWE-016] 

**Chapter 5: Software Documentation Requirements - Provides the details of the content 
requirements for software plans and work products 



Process Management and Risk 
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"Traceability Rocks!" 

- Someone very passionate about traceability 

7150 Translation 

The project shall: 

• Maintain bidirectional traceability between the software requirement and the 
higher-level requirement. [SWE-052] 

• Maintain bidirectional traceability between requirements and design. [SWE- 
059] 

• Maintain bidirectional traceability from software design to code. [SWE-064] 

• Maintain bidirectional traceability from the Software Test Procedures to the 
software requirements. [SWE-072] 



The Cliff Notes 
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For Class B software, If your organization has not been appraised/rated at 
CMMi level 2, a gap analysis is required 


Per NPR 7150. 2A [SWE-032] 


So "For Class B software, in lieu of a CMMI rating by a development 
organization, the project will conduct an evaluation, performed by a 
qualified evaluator selected by the Center Engineering Technical 
So Authority, of the seven process areas listed in SWE-032 and mitigate any 


So 


risk, if deficient. 


Int 


Implement Design into Software Code. [SWE-060] 


Software User Manual [SWE-115] 


Software Version Description [SWE-116] 
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Ibo This exception is intended to be used in those cases in which NASA wishes 
So to purchase a product from the "best of class provider," but the best of 
So class provider does not have the required CMMI rating." 

Veil I lUdllUl I IVIdll IA [O V V I—-VJOWJ , [UVV l_-VJUOJ 


ent 



"Falling Off The Cliff" Notes 




Software Planning 


Software Inventory/Classification [SWE-20] 


Determine the software safety criticality [SWE-133] 


Software Safety 


Develop a Software Safety plan [SWE-023], [SWE-130], [SWE-138] 

7 C A 

A 

Implement design requirements for safety critical software [SWE-134] 



Compliance 


Provide a compliance matrix [SWE-125] 

> 

Full compliance consistent with software classification. [SWE-139] 



Classification/Inventory Process 




NPR 7150 SW Class Definitions 
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Classification 

Characteristics 

Class A Human Rated 
Software (SW) Systems 

All space flight software (SW) subsystems (ground and 
flight) developed and/or operated by or for NASA to support 
human activity in space and that interact with NASA human 
space flight systems. 

Class B Non-Human Space 
Rated SW Systems or Large 
Scale Aeronautics Vehicles 

Flight and ground SW that must perform reliably in order to 
accomplish primary mission objectives. Large scale 
aeronautics vehicles that are NASA unique in which the SW 
is integral to controls. 

Class C Mission Support SW 
or Aeronautics Vehicles or 
Major Engineering Research 
Facility SW 

Flight/ground SW necessary for the science return from a 
single (non-critical) instrument or is used to analyze/process 
mission data or other SW for which a defect could adversely 
impact attainment of any secondary mission objectives or 
cause operational problems for which potential workarounds 
exist. Systems for non-large scale aeronautics vehicles in 
which SW is integral to controls. Systems that operate a 
major engineering/research facility. 







NASA Software Class Examples 
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Class B Software 


Class C Software 


• Non-primary Instrument 
Flight SW 

• Spacecraft Simulators 

• Large Scale Facilities 
Operations/Control (control 
of high-value assets) 

• GSE that interfaces to flight 
hardware 


riticality, Complexity, Reliability, Safety 












Safety Criticality 



Safety Critical Software 
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The NASA Software Safety Standard, NASA-STD-8719.13C, 
describes safety critical software as software that: 

— Controls or mitigates system hazards 

— Resides on the same processor as safety critical software and 
is not logically separated 

— Processes data that drives safety decisions 

— Provides V&V of safety critical systems 



The Hazard Analysis and 
Reliability Analysis ( FTA/FMEA) 
are the drivers for identifying 
the critical elements 




Safety Critical Software Design 

Requirements 
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Safety-Critical Software must: 

• Initialize (and reinitialize), transition and terminates to 
a safe state 

• Validate input and output data prior to use 

• Provides failure detection and correction 
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critical code and data within source code comments 



Safety Critical Software Rigor 

Simplified 
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• Identify Safety Critical Software 

- Designate Safety Critical Requirements as such and 
mark software design elements(functions, data, etc.) 

• Apply design requirements for Safety Critical 
Software 

• If changing Safety Critical Software, the changes 
must be evaluated for safety considerations 

• Verify the software meets the safety critical 
requirements 

- High fidelity testing 

- Nominal and off-nominal testing 


Compliance 




HowTo Evidence Compliance 
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• Utilize the compliance matrix from the NPR and 
your software plans to derive your compliance 
matrix 

• Be sure to identify the "auditable" artifact that is 
produced by your plans to show compliance 

• Provide access to the CM system or repository 
that houses your development artifacts 

• As artifacts are completed, and placed under CM, 
add the associated identifier to the compliance 
matrix 



GSFC Waiver Workflow 
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The project completes the GSFC Waiver Request 

form 


The Software Quality Engineer approves the waiver 


The waiver is submitted to the Software Engineering Technical 
Authority (ETA) , the Software Engineering Division Chief 


r ^ 

A Software Waiver Review Panel reviews the waiver and advises the 

Software ETA 



If the waiver requires HQ approval, the Software ETA forwards the 
waiver on to the NASA Headquarters Office of the Chief Engineer. 








Waiver Approval Authority 
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The following requirements require approval by NASA 
HQ: 


Requirement Number(s) 

Description 

SWE-013 

Required Software Plans 

SWE-020, SWE-132 

Software Classification 

SWE-032 

CMMI Requirements 

SWE-086 

Risk Management Requirements 

SWE-022, SWE-106 

Software Assurance Requirements 

SWE-023, SWE-130, SWE-133, 
SWE-138 

Software Safety Requirements 


Challenges & Concerns 



Typical Supplier Concerns 
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Problem Solutions 


Establish organizational/multi-project plans. 
Consolidate plans 

Examine your current process, to ensure that it is fully 
documented. 

Excessive requirements for 

software plans Perform a gap analysis of your existing process against 

the NPR. 

Assess the gaps for risks, and modify the process 
accordingly, applying for waivers where an approach 
exist for managing the risk. 






Typical Supplier Concerns Cont 
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Typical Problem 

Solutions 

Burdensome reporting and 

Make effective use of software tools and their 

metrics requirements 

reporting capabilities 


Review oversight plans (SAP, IPEP) for understanding 
of the scope of activities. 

Cost of oversight (QA, IV&V, 

Invite QA and IVV to participate as stakeholders or 

Supply Chain) 

voluntary participants in your processes. 


Include receipt of and response to QA and IVV 
findings in your schedule. 




Final Thoughts 





Final Thoughts 



• 7150. 2A is the NASA standard, but it is mostly comprised of 
standard methods employed by mature development teams. 

• The cost of implementing the NPR is offset by the early 
identification of process inefficiencies that yield errors 


• Your NASA SW Systems Engineering leads, and SW Assurance 
leads, have seen the NPR adopted successfully by multiple 
shops with varying profiles, and are available to assist you in 
navigating the requirements, and avoiding the risk of 
overcomplicating your efforts to comply with the standard 
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Please email additional 
questions/feedback to: 


lsaac.e.mcginnis@nasa.gov 

Manuel.d.maldonado@nasa.gov 


